Job Summary

Group Internal Audit (GIA) in Standard Chartered Bank is looking for a Senior Technology Professional with Risk and Control mindset to join their Technology & Architecture (T&A) audit team.
The role holder is expected to support in leading and delivering the audit work covering key risks of Technology Architecture and Infrastructure, including emerging technologies such as Artificial Intelligence and Digital Assets.
Should have minimum of 12 years of hand-on experience in implementing and running technologies operations and must have in-depth technical knowledge on Platforms, Network, Databases, Storage, Cloud and Emerging Technologies.
Support T&A HOA in writing audit opinion summarising the audit work for the risk committee papers and to the Board Audit Committee.
Strong communicator, both written and verbal, with ability to clearly explain technical issues to senior technology leaders and write audit issues, reports, and opinions in simple English.
Ability to manage the team, provide coaching and mentoring to team members and lead technical auditors to deliver audits covering enterprise wide technologies.
Strong analytical skills with hands-on experience on SQL, Python, Power BI, Tableau.

Key Responsibilities

Strategy

Build relationship with Senior Technology Leaders to gain and share insights on the current and future T&A strategy and roadmap.
Support the T&A HOA in keeping up with the key changes within T&A portfolio and perform risk assessments to identify key areas for audit coverage.
Support the T&A HOA in developing and implementing a training plan for the team to ensure that team has appropriate skills to cover the T&A portfolio.
Provide clear, effective supervision and leadership to the audit teams and champion the implementation of the strategy.
Carry out their role in line with the Audit Charter and remain independent from management and free from interference

Audit Delivery

Act as Team Manager to lead the delivery of high risk audits of enterprise wide technology and work with other GIA technology and business teams when required.
Execute audit work and issue validation in an efficient and effective manner, within the given budget and timelines.
Provide clear guidance, detailed review, and supervision of the audit team's work, so that audit deliverables meet quality standards.
Clearly identify the risks and impact of issues during issue writing, agreeing these issues with management and obtaining quality management action plans to mitigate the risk.
Provide guidance to the team on business / audit technical knowledge and management skills.
Champion innovation and increase the use of leading edge methods, such as artificial intelligence and data analytics, in audit assignments.
Track the implementation / delivery of the agreed issues and action plans for the audits assigned, understanding the key risks arising, provide advice on resolution of issues to auditees/action plan owners and escalate audit findings that remain unresolved

Business

Continuously engage with Technology Business Units (BUs) Leads to gain insights on the key technologies that are getting introduced in the Bank and support the business by sharing opinion when requested.
Monitor the progress of key Technology Transformational programmes and provide insights to Heads of Audit on the programme development, and key Risk and Control topics.
Perform, support, or lead the planning, fieldwork, and reporting of internal audit engagements to deliver agreed assurance objectives to established GIA standards and timelines.
Deliver audits / assignments within budget and drive efficiency to support cost save objectives.

Processes

Act as Team Manager to lead the delivery of high risk audits of enterprise wide technology and work with other GIA technology and business teams when required.
Execute audit work and issue validation in an efficient and effective manner, within the given budget and timelines.
Provide clear guidance, detailed review, and supervision of the audit team's work, so that audit deliverables meet quality standards.
Clearly identify the risks and impact of issues during issue writing, agreeing these issues with management and obtaining quality management action plans to mitigate the risk.
Provide guidance to the team on business / audit technical knowledge and management skills.
Champion innovation and increase the use of leading edge methods, such as artificial intelligence and data analytics, in audit assignments.
Track the implementation / delivery of the agreed issues and action plans for the audits assigned, understanding the key risks arising, provide advice on resolution of issues to auditees/action plan owners and escalate audit findings that remain unresolved.

Personal Behaviours

Model valued behaviours and foster an environment that recognizes positive contributions
Engage with peers to enhance knowledge sharing.
Seek external perspectives to improve audit work.
Provide expertise to support GIA audit teams.
Implement and support department initiatives, including planning and training.

People & Talent

Share knowledge, skills and experience with team members and the wider GIA and provide advisory to internal auditors from both business and technology teams.
Assist in conducting training sessions for GIA Stakeholders on Emerging Technologies and concepts, such as Infrastructure as a Code, DevOps, DevSecOps, Centre Observability Platforms, Virtualisation.
Support the function in audit talent development and career growth.
Develop skills and competencies to support the function in ensuring future readiness.
Contribute to building a high performing collaborative function through regular feedback and coaching

Risk Management

Complete relevant risk assessment activities in a timely and effective manner, including the completion of the Risk Assessment template.
Assist in continuous auditing and monitoring of key risks in Technology Infrastructure.
Follow changes in the laws and regulations to identify emerging risks.

Governance

Assist the HOA to manage the relevant Technology stakeholders and establish good working relationships to help the Technology BUs to improve the control environment and keep updated with changes in the technology landscape impacting their risk profile.
Ensure clear communication of findings /issues / root causes to all relevant stakeholders and monitor / escalate any overdue actions plans to the appropriate business manager and/or governance committee for resolution.
Ensure timely escalation of delays in execution of audit work, both to auditee management and GIA management.

Regulatory & Business Conduct

Display exemplary conduct and live by the Group's Values and Code of Conduct;
Should have knowledge of key regulatory requirements related to technology, specifically the requirements of key regulators PRA, FCA, HKMA, MAS, RBI.
Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct; and
Effectively and collaboratively identify, escalate, mitigate and resolve risk, conduct and compliance matters.

Key Stakeholders

Designated technology senior stakeholders, typically related to individual audit assignments and the Technology BUs Leads of T&A portfolio.
GIA stakeholders, including Management team, and Portfolio, Functional and Country Heads of Audit.

Other Responsibilities

Embed Here for good and Group's brand and values in GIA.
Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures.

Skills And Experience

Education: Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related field. A master's degree is a plus
Experience: Minimum of 12 years of experience in 12 years of hand-on experience in implementing and running technologies operations and must have in-depth technical knowledge on Platforms, Network, Databases, Storage, Cloud and Emerging Technologies

Technical And Soft Skills

Strong understanding of IT infrastructure components, including servers, networks, databases, and cloud services.
Knowledge of cybersecurity principles, frameworks, and best practices.
Knowledge of Artificial Intelligence and Machine Learning principles, algorithms, and models.
Familiarity with supervised, unsupervised, and reinforcement learning.
Understanding of blockchain technology, including how it works, consensus mechanisms (e.g., Proof of Work, Proof of Stake), and smart contracts.
Understanding of distributed ledger technology and how decentralized networks operate.
Knowledge of cryptographic principles and techniques used in blockchain, such as hashing, digital signatures, and public/private key encryption.
Proficiency in audit tools and techniques.
Analytical Skills: Excellent analytical and problem-solving abilities with a keen attention to detail.
Communication Skills: Strong written and verbal communication skills to effectively convey audit findings and recommendations.
Interpersonal Skills: Ability to work collaboratively with cross-functional teams and build strong relationships with stakeholders.
Professional Certifications: Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Cloud Security Professional (CCSP), or Certificate of Cloud Auditing are highly desirable.
Familiarity with regulatory requirements and industry standards (e.g., ISO 27001, GDPR, SOX)

Role Specific Technical Competencies

Technologies

Platforms

Operating Systems
Database
Storage

Networks

Perimeter network
Core network and Directory Services
Virtualised Environment
Virtual Cloud Foundation
Network Virtualisation and Security Platforms
EXSi
Middleware and Integration Services
Collaboration and Communication Services
Public Cloud Services
Midrange and Mainframe systems

Technology Concepts And Tools

Technology Architecture
Infrastructure as a Code
DevOps and DevSecOps
Central Observability Platforms
Artificial Intelligence
Digital Assets such as Blockchain

Data Analytics

Python
SQL
Audit
Risk and Controls
English (Written/Spoken)
Microsoft Word/Excel/PowerPoint

Competencies

Action Oriented

Collaborates

Customer Focus

Gives Clarity & Guidance

Manages Ambiguity

Develops Talent

Drives Vision & Purpose

Nimble Learning

Decision Quality

Courage

Instills Trust

Strategic Mindset

Technical Competencies: This is a generic competency to evaluate candidate on role-specific technical skills and requirements

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together We

Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What We Offer

In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.

Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
Flexible working options based around home and office locations, with flexible working patterns.
Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.

Senior Manager, Database Architect (Automation)

Senior / Manager Cloud FinOps (Based in Malaysia)

Senior Audit Manager - Technology & Architecture T&O

Senior Product Manager